Threats tagged 'ghsa-3576-2p3h-9f2r'

1 threat

Threats tagged 'ghsa-3576-2p3h-9f2r'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.1	EPSS 0.2%	CVE-2026-78083SP Property extension for Joomla · Cross-Site Request Forgery (CSRF) High7.1EPSS 0.2%2026-09-10CVE Database V5CVE-2026-78083 A Cross-Site Request Forgery (CSRF) vulnerability exists in the SP Property extension for Joomla versions 1.0.0 through 4.1.3. The vulnerability affects the property booking and agent contact form submission endpoints, which process POST requests without verifying Joomla session anti-CSRF tokens. This could allow an attacker to perform unauthorized actions on behalf of a logged-in user. EPSS 0.2%Vulnerability joomshaper.com #cwe-352 #ghsa-3576-2p3h-9f2r	CVE Database V5	2026-09-10

Showing 1–1 of 1 result